www.chms.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:92:c4:6f:cb:3f:f9:e2:1e:e3:b1:59:dd:06:54:a1:15 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.chms.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:92:c4:6f:cb:3f:f9:e2:1e:e3:b1:59:dd:06:54:a1:15
Serial Number (int): 293178205163947470227328225622936786346261
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:b3:2e:f9:d4:64:1c:77:9f:5c:73:6f:75:08:ca:28:47:35:de:7e
Fingerprint (sha256): 68:ca:44:0e:53:13:5c:8c:89:0c:d1:34:f8:ec:2a:40:05:3a:97:26:eb:5c:47:70:f1:c8:22:f9:b1:c8:2b:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.chms.mx

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.chms.mx

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.adulted.kcusd.com
admin.alta.kcusd.com
admin.bartsch.kcusd.com
admin.centroculturaljalilgibran.edu.mx
admin.citrus.kcusd.com
admin.conner.kcusd.com
admin.dunlap.kcusd.com
admin.grant.kcusd.com
admin.greatwestern.kcusd.com
admin.gwcarveracademy.org
admin.jefferson.kcusd.com
admin.kchs.kcusd.com
admin.kckids.kcusd.com
admin.kcusd.com
admin.learningcenter.kcusd.com
admin.lincoln.kcusd.com
admin.maa.school
admin.mccord.kcusd.com
admin.mountainview.kcusd.com
admin.navelencia.kcusd.com
admin.ochs.kcusd.com
admin.reed.kcusd.com
admin.rhs.kcusd.com
admin.riverview.kcusd.com
admin.rmchs.kcusd.com
admin.sheridan.kcusd.com
admin.voyageacademyutah.org
admin.washington.kcusd.com
adulted.kcusd.com
alta.kcusd.com
bartsch.kcusd.com
be.cbisd.com
centroculturaljalilgibran.edu.mx
ces.comfortisd.org
chms.mx
chs.cbisd.com
chs.comfortisd.org
citrus.kcusd.com
cms.comfortisd.org
cms.wvsd.com
conner.kcusd.com
cpa.cpsbla.us
dhhs.wvsd.com
dla.kcusd.com
dunlap.kcusd.com
es.centralisd.com
fjh.cpsbla.us
fue.cpsbla.us
grant.kcusd.com
greatwestern.kcusd.com
gwcarveracademy.org
hs.centralisd.com
jefferson.kcusd.com
jhs.centralisd.com
kchs.kcusd.com
kckids.kcusd.com
learningcenter.kcusd.com
lincoln.kcusd.com
maa.school
mccord.kcusd.com
mountainview.kcusd.com
mtalverniaacad.org
navelencia.kcusd.com
ness.wvsd.com
oc.wvsd.com
ochs.kcusd.com
olc.wvsd.com
pasadena.wvsd.com
reed.kcusd.com
rhs.kcusd.com
riverview.kcusd.com
rmchs.kcusd.com
seth.wvsd.com
sheridan.kcusd.com
svhs.wvsd.com
vle.cpsbla.us
voyageacademyutah.org
vue.cpsbla.us
washington.kcusd.com
wbjh.cbisd.com
wce.cbisd.com
wpe.cbisd.com
wvcs.wvsd.com
wvhs.wvsd.com
www.cbisd.com
www.centralisd.com
www.centroculturaljalilgibran.edu.mx
www.chms.mx
www.comfortisd.org
www.confluenceacademy.org
www.dawsonisd.net
www.gwcarveracademy.org
www.kcusd.com
www.maa.school
www.mtalverniaacad.org
www.troy.k12.mi.us
www.voyageacademyutah.org
www.wvsd.com

Other certificates including the domain name chms.mx

(limited to 100 certificates)
www.chms.mx
wheatley.tisd.org
admin.kcusd.com
admin.cca-denver.org
admin.ccti.pgsd.ms
admin.ccti.pgsd.ms
admin.ccti.pgsd.ms
admin.hbuhsd.edu
admin.ccti.pgsd.ms
admin.ccti.pgsd.ms
admin.cca-denver.org
admin.adulted.kcusd.com
admin.cca-denver.org
admin.cca-denver.org
admin.ccti.pgsd.ms
admin.adulted.kcusd.com
admin.ccti.pgsd.ms
admin.cca-denver.org
admin.adulted.kcusd.com
admin.chms.mx
admin.adulted.kcusd.com
admin.cca-denver.org
admin.ccti.pgsd.ms
www.chms.mx
admin.ccti.pgsd.ms
cpa.confluenceacademy.org
ccti.pgsd.ms
admin.cca-denver.org
admin.sqhs.monroe.k12.tn.us
admin.cca-denver.org
chms.mx
admin.centroculturaljalilgibran.edu.mx
lincoln.kcusd.com
vapa.mvusd.net
admin.ccti.pgsd.ms
comfortisd.org
admin.adulted.kcusd.com
admin.cca-denver.org
admin.chms.mx
admin.adulted.kcusd.com
www.centroculturaljalilgibran.edu.mx
www.leusd.k12.ca.us
admin.cca-denver.org
admin.greatwestern.kcusd.com
ps086.com
admin.cvhs.cv.k12.ca.us
www.monte-rosa.mx

Certificate

The complete raw certificate details for www.chms.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOETCCDPmgAwIBAgISA12SxG/LP/niHuOxWd0GVKEVMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDcwOTQyNThaFw0x
OTA5MDUwOTQyNThaMBYxFDASBgNVBAMTC3d3dy5jaG1zLm14MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7rfYVCl+ph5m8FJJO
EgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBgn18RTHnTD9fS27Jx
yeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2e6StagubO+pVwFzG
8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8el2z375LDd2VIwrdW
QP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKfRiY0ckFuu/DYkuvk
NKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/MR/JMR9nceWyZ2Mu
nd+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F7q6ckUbIgpeo7stn
7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm64XjXNjP9F1W8+5t
lcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3Q4E2w6Aud9PYyV05
pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCIDiQVG30eHhb3OIP3
bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ikD4me6o58sq/IQVmy
em1M/E0CAwEAAaOCCiMwggofMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUL2vITWws
LjLyACD/LU1sWvxuurswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCB9cGA1UdEQSCB84wggfKghdhZG1pbi5hZHVsdGVk
LmtjdXNkLmNvbYIUYWRtaW4uYWx0YS5rY3VzZC5jb22CF2FkbWluLmJhcnRzY2gu
a2N1c2QuY29tgiZhZG1pbi5jZW50cm9jdWx0dXJhbGphbGlsZ2licmFuLmVkdS5t
eIIWYWRtaW4uY2l0cnVzLmtjdXNkLmNvbYIWYWRtaW4uY29ubmVyLmtjdXNkLmNv
bYIWYWRtaW4uZHVubGFwLmtjdXNkLmNvbYIVYWRtaW4uZ3JhbnQua2N1c2QuY29t
ghxhZG1pbi5ncmVhdHdlc3Rlcm4ua2N1c2QuY29tghlhZG1pbi5nd2NhcnZlcmFj
YWRlbXkub3JnghlhZG1pbi5qZWZmZXJzb24ua2N1c2QuY29tghRhZG1pbi5rY2hz
LmtjdXNkLmNvbYIWYWRtaW4ua2NraWRzLmtjdXNkLmNvbYIPYWRtaW4ua2N1c2Qu
Y29tgh5hZG1pbi5sZWFybmluZ2NlbnRlci5rY3VzZC5jb22CF2FkbWluLmxpbmNv
bG4ua2N1c2QuY29tghBhZG1pbi5tYWEuc2Nob29sghZhZG1pbi5tY2NvcmQua2N1
c2QuY29tghxhZG1pbi5tb3VudGFpbnZpZXcua2N1c2QuY29tghphZG1pbi5uYXZl
bGVuY2lhLmtjdXNkLmNvbYIUYWRtaW4ub2Nocy5rY3VzZC5jb22CFGFkbWluLnJl
ZWQua2N1c2QuY29tghNhZG1pbi5yaHMua2N1c2QuY29tghlhZG1pbi5yaXZlcnZp
ZXcua2N1c2QuY29tghVhZG1pbi5ybWNocy5rY3VzZC5jb22CGGFkbWluLnNoZXJp
ZGFuLmtjdXNkLmNvbYIbYWRtaW4udm95YWdlYWNhZGVteXV0YWgub3JnghphZG1p
bi53YXNoaW5ndG9uLmtjdXNkLmNvbYIRYWR1bHRlZC5rY3VzZC5jb22CDmFsdGEu
a2N1c2QuY29tghFiYXJ0c2NoLmtjdXNkLmNvbYIMYmUuY2Jpc2QuY29tgiBjZW50
cm9jdWx0dXJhbGphbGlsZ2licmFuLmVkdS5teIISY2VzLmNvbWZvcnRpc2Qub3Jn
ggdjaG1zLm14gg1jaHMuY2Jpc2QuY29tghJjaHMuY29tZm9ydGlzZC5vcmeCEGNp
dHJ1cy5rY3VzZC5jb22CEmNtcy5jb21mb3J0aXNkLm9yZ4IMY21zLnd2c2QuY29t
ghBjb25uZXIua2N1c2QuY29tgg1jcGEuY3BzYmxhLnVzgg1kaGhzLnd2c2QuY29t
gg1kbGEua2N1c2QuY29tghBkdW5sYXAua2N1c2QuY29tghFlcy5jZW50cmFsaXNk
LmNvbYINZmpoLmNwc2JsYS51c4INZnVlLmNwc2JsYS51c4IPZ3JhbnQua2N1c2Qu
Y29tghZncmVhdHdlc3Rlcm4ua2N1c2QuY29tghNnd2NhcnZlcmFjYWRlbXkub3Jn
ghFocy5jZW50cmFsaXNkLmNvbYITamVmZmVyc29uLmtjdXNkLmNvbYISamhzLmNl
bnRyYWxpc2QuY29tgg5rY2hzLmtjdXNkLmNvbYIQa2NraWRzLmtjdXNkLmNvbYIY
bGVhcm5pbmdjZW50ZXIua2N1c2QuY29tghFsaW5jb2xuLmtjdXNkLmNvbYIKbWFh
LnNjaG9vbIIQbWNjb3JkLmtjdXNkLmNvbYIWbW91bnRhaW52aWV3LmtjdXNkLmNv
bYISbXRhbHZlcm5pYWFjYWQub3JnghRuYXZlbGVuY2lhLmtjdXNkLmNvbYINbmVz
cy53dnNkLmNvbYILb2Mud3ZzZC5jb22CDm9jaHMua2N1c2QuY29tggxvbGMud3Zz
ZC5jb22CEXBhc2FkZW5hLnd2c2QuY29tgg5yZWVkLmtjdXNkLmNvbYINcmhzLmtj
dXNkLmNvbYITcml2ZXJ2aWV3LmtjdXNkLmNvbYIPcm1jaHMua2N1c2QuY29tgg1z
ZXRoLnd2c2QuY29tghJzaGVyaWRhbi5rY3VzZC5jb22CDXN2aHMud3ZzZC5jb22C
DXZsZS5jcHNibGEudXOCFXZveWFnZWFjYWRlbXl1dGFoLm9yZ4INdnVlLmNwc2Js
YS51c4IUd2FzaGluZ3Rvbi5rY3VzZC5jb22CDndiamguY2Jpc2QuY29tgg13Y2Uu
Y2Jpc2QuY29tgg13cGUuY2Jpc2QuY29tgg13dmNzLnd2c2QuY29tgg13dmhzLnd2
c2QuY29tgg13d3cuY2Jpc2QuY29tghJ3d3cuY2VudHJhbGlzZC5jb22CJHd3dy5j
ZW50cm9jdWx0dXJhbGphbGlsZ2licmFuLmVkdS5teIILd3d3LmNobXMubXiCEnd3
dy5jb21mb3J0aXNkLm9yZ4IZd3d3LmNvbmZsdWVuY2VhY2FkZW15Lm9yZ4IRd3d3
LmRhd3NvbmlzZC5uZXSCF3d3dy5nd2NhcnZlcmFjYWRlbXkub3Jngg13d3cua2N1
c2QuY29tgg53d3cubWFhLnNjaG9vbIIWd3d3Lm10YWx2ZXJuaWFhY2FkLm9yZ4IS
d3d3LnRyb3kuazEyLm1pLnVzghl3d3cudm95YWdlYWNhZGVteXV0YWgub3Jnggx3
d3cud3ZzZC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw
KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgor
BgEEAdZ5AgQCBIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnm
EHvMVgAAAWsxiNEdAAAEAwBHMEUCIHIzSn5ntYBHLvr6h6EhjdB80DDsSqPlbXXM
olZIUXqbAiEA5fA2MNTZXciBgHNoTDBJ5ogVPh8XBH3dSqqZBbsIetsAdgBj8tvN
6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWsxiNEkAAAEAwBHMEUCIGvk
ry5AiXdkLzbPIZ/u+KpwQnPeCV7nGN6tu3ZO9pRCAiEAz2ddQxzVulfLYTcsm3PV
CVbZFlw60F77yVb6xIsFNAcwDQYJKoZIhvcNAQELBQADggEBAFCiZY++jSyVRCVs
hV4aVRTlCQsq6dNkXzV2b/7cDF+pKeOwf3l3knAdhS7VLrKgPEt0exCwLZROfT9g
PdDJNevjmrBW8Z81uzGVOv1HLWYHLpoD33GlnwTh7jHAqxXYdfk7zZYP9fWCVdZI
Tul5roVGdYQ6V3dUq90ps2X1YFRTRkGco/igsCIZevZcNbWjVNNM3c5ITKvDi1f2
yvfXjFi7qkEI1CnhAsRhkpdPF46lRZTOxxiz8l/n/mGfnXzmPItXC9V5J9GSaoNz
QyJ98hR8UwzZNT5d82CWKzGWHKi7fmvPa3aM/SJPug+Mauakrf5BbJbtcrDMGwf9
Iqpso6Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293178205163947470227328225622936786346261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 09:42:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 09:42:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.chms.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1998 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.adulted.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alta.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bartsch.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.centroculturaljalilgibran.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.citrus.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.conner.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dunlap.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.grant.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.greatwestern.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gwcarveracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jefferson.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kchs.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kckids.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.learningcenter.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maa.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mccord.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mountainview.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.navelencia.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ochs.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.reed.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhs.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.riverview.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rmchs.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sheridan.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.voyageacademyutah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washington.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adulted.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alta.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartsch.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.cbisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centroculturaljalilgibran.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.comfortisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chms.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.cbisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.comfortisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrus.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.comfortisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.wvsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conner.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpa.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhhs.wvsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dla.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunlap.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.centralisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fjh.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fue.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grant.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatwestern.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwcarveracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.centralisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferson.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhs.centralisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kchs.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kckids.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningcenter.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maa.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccord.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainview.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtalverniaacad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navelencia.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ness.wvsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.wvsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ochs.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olc.wvsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasadena.wvsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reed.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverview.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmchs.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seth.wvsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheridan.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svhs.wvsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vle.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyageacademyutah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vue.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbjh.cbisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wce.cbisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpe.cbisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvcs.wvsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvhs.wvsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centroculturaljalilgibran.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chms.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comfortisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.confluenceacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dawsonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gwcarveracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maa.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtalverniaacad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troy.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voyageacademyutah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wvsd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b3188d11d0000040300473045022072334a7e67b580472efafa87a1218dd07cd030ec4aa3e56d75cca25648517a9b022100e5f03630d4d95dc8818073684c3049e688153e1f17047ddd4aaa9905bb087adb00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b3188d124000004030047304502206be4af2e408977642f36cf219feef8aa704273de095ee718deadbb764ef69442022100cf675d431cd5ba57cb61372c9b73d50956d9165c3ad05efbc956fac48b053407
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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